Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/0IlW2kpTWRLe7p9Od9fygaimwkk.roa
File: 0IlW2kpTWRLe7p9Od9fygaimwkk.roa (raw, json)
Hash identifier: 1OmiMNQaRPHD2VHqQJxymJn7f8SU+6ks36CG5s8lcJ8=
Subject key identifier: D0:89:56:DA:4A:53:59:12:DE:EE:9F:4E:77:D7:F2:81:A8:A6:C2:49
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019DB943E4DCE958B30B8A2BCE0575F8A9B0
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/0IlW2kpTWRLe7p9Od9fygaimwkk.roa
Signing time: Thu 23 Apr 2026 07:35:27 +0000
ROA not before: Thu 23 Apr 2026 07:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214962
IP address blocks: 216.195.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:43:e4:dc:e9:58:b3:0b:8a:2b:ce:05:75:f8:a9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 23 07:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d08956da4a535912deee9f4e77d7f281a8a6c249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:f8:c0:d9:53:d2:11:90:5d:af:7e:6a:e3:
6b:bc:7a:c3:4f:90:3a:35:eb:4c:b0:54:3b:65:9f:
23:2e:c9:a2:c0:d5:4a:ff:2d:ed:6d:32:d1:b6:54:
49:cf:bf:00:46:0a:1c:88:02:97:5a:94:64:4b:3d:
a5:ad:37:a5:a2:89:82:4a:d9:de:7f:2c:ec:d6:a5:
89:f1:cd:96:a8:98:07:22:d4:42:66:9b:a4:d6:9a:
ba:66:a3:05:10:ca:41:72:81:78:3d:47:4d:7e:04:
a8:66:a0:42:2c:ba:ee:1f:50:33:55:3b:7f:b9:90:
79:85:d7:ff:26:c2:38:55:fc:6c:8b:7b:17:98:46:
22:20:e3:c5:bb:a6:3a:5b:6a:7b:0f:37:64:bf:a7:
80:25:5b:a6:7c:12:0f:27:fb:f1:bb:59:97:a3:61:
76:de:f6:79:af:19:c9:6d:87:1d:b4:c4:98:cc:28:
69:ab:53:4b:78:1f:83:f6:5d:c0:16:ff:cb:f7:d5:
72:cf:c6:6d:2d:ca:b5:a4:95:b3:90:a7:91:f8:01:
e7:3a:e6:d1:8a:03:d4:6b:c6:a9:d1:db:ad:ce:e4:
76:58:16:f6:58:59:17:4f:dd:24:ae:62:f0:76:e1:
37:62:5e:58:79:b7:da:d5:75:c4:91:20:34:a9:4f:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:89:56:DA:4A:53:59:12:DE:EE:9F:4E:77:D7:F2:81:A8:A6:C2:49
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/0IlW2kpTWRLe7p9Od9fygaimwkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.195.206.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e2:9b:db:1a:c9:da:bb:0d:67:84:33:09:b9:8e:1d:4e:4b:
0e:83:e0:4e:4c:63:f3:79:bf:57:b4:68:78:46:94:7c:c4:33:
d6:17:ec:0f:b4:f5:fe:13:89:1f:e2:5d:47:2b:4b:cf:79:b5:
84:2a:53:79:9d:c8:5d:84:bf:5b:6c:e6:2b:08:8a:52:93:e2:
31:cc:3f:a6:d7:9b:d5:96:7e:bf:f3:95:58:c8:b5:29:e1:73:
df:23:f0:6b:cc:6f:fd:46:f5:e5:9f:43:bd:8c:09:26:0e:f0:
f1:a7:04:6f:74:5e:c3:93:c6:35:5f:4f:1c:51:c7:8a:d3:4e:
d7:95:bc:3a:de:ad:56:ee:f1:f8:b8:a3:09:7a:38:31:ec:65:
30:3b:62:b8:47:74:07:47:77:6b:7f:c1:fb:e0:8f:e0:40:62:
1a:03:0e:b7:72:48:52:4f:d4:70:f8:0e:51:56:01:82:d7:01:
ce:a3:78:47:66:38:ed:92:5a:3c:6e:2a:84:f8:6f:70:aa:32:
b5:0d:65:20:71:b1:93:24:0a:ac:2f:05:c2:68:e7:1d:81:1c:
7a:2f:dd:fe:41:c4:b7:25:4d:49:fb:e1:9d:cd:4e:13:ce:2e:
76:35:3a:a7:8b:68:0b:c7:44:36:fe:c3:e7:6e:90:1c:8b:9b:
e9:72:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:23 2026 by rpki-client